☁️ Free practice test question from: KCNA (KCNA)

In Kubernetes, a ServiceAccount is the resource that allows pods to authenticate to the API server.

A ServiceAccount provides an identity for processes running in a pod. When a pod is created, Kubernetes automatically mounts a token for a ServiceAccount in that pod (unless configured otherwise). This token lets the pod authenticate to the API server.

Think of a ServiceAccount like an ID badge that a pod uses to identify itself when talking to the API server. Without this identity, the API server wouldn't know who is making requests.